-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 14 Feb 2026 15:49:14 +0100
Source: gnutls28
Binary: gnutls-bin gnutls-bin-dbgsym guile-gnutls guile-gnutls-dbgsym libgnutls-dane0 libgnutls-dane0-dbgsym libgnutls-openssl27 libgnutls-openssl27-dbgsym libgnutls28-dev libgnutls30 libgnutls30-dbgsym libgnutlsxx30 libgnutlsxx30-dbgsym
Architecture: armhf
Version: 3.7.9-2+deb12u6
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 gnutls-bin - GNU TLS library - commandline utilities
 guile-gnutls - GNU TLS library - GNU Guile bindings
 libgnutls-dane0 - GNU TLS library - DANE security support
 libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper
 libgnutls28-dev - GNU TLS library - development files
 libgnutls30 - GNU TLS library - main runtime library
 libgnutlsxx30 - GNU TLS library - C++ runtime library
Closes: 1121146
Changes:
 gnutls28 (3.7.9-2+deb12u6) bookworm-security; urgency=high
 .
   * Add patch for CVE-2025-9820 / GNUTLS-SA-2025-11-18 from 3.8.11.
     Closes: #1121146
   * libgnutls: Fix name constraint processing performance issue
     Verifying certificates with pathological amounts of name constraints
     could lead to a denial of service attack via resource exhaustion.
     Reworked processing algorithms exhibit better performance
     characteristics. Reported by Tim Scheckenbach.
     [Fixes: GNUTLS-SA-2026-02-09-2, CVSS: medium] [CVE-2025-14831]
Checksums-Sha1:
 c75828ca07c15e3cefe8e4e2d0068479ca6eddb0 842208 gnutls-bin-dbgsym_3.7.9-2+deb12u6_armhf.deb
 f86fd4b76d366c1ee80ed2fa98531fb25ac27efc 616228 gnutls-bin_3.7.9-2+deb12u6_armhf.deb
 37a34d4e3df6b7a246a79804ce4e9a26b1fc8421 11299 gnutls28_3.7.9-2+deb12u6_armhf-buildd.buildinfo
 de9e76d08a7039f1bd87c32ed76ee254b749f0cb 253640 guile-gnutls-dbgsym_3.7.9-2+deb12u6_armhf.deb
 02f102e356882f6212cf2e46844dc9818ad4df8b 453956 guile-gnutls_3.7.9-2+deb12u6_armhf.deb
 4396eed32417b415352da95eecd3f4d78757c196 90384 libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_armhf.deb
 65895aa51e495016c60d2cedf461e3784847807a 400512 libgnutls-dane0_3.7.9-2+deb12u6_armhf.deb
 9b1c18195e57bb523e574f72cb945287583b515c 91660 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_armhf.deb
 9523e75844b883b69a65529d119beca2b2901779 400324 libgnutls-openssl27_3.7.9-2+deb12u6_armhf.deb
 43104860aa18ceb0471fbc382698a43d7edcfceb 1289864 libgnutls28-dev_3.7.9-2+deb12u6_armhf.deb
 16c816702d6372ee81370513ffd86176edafba12 2037860 libgnutls30-dbgsym_3.7.9-2+deb12u6_armhf.deb
 030b67c55fdc54afe52359cd9499502773fb83d6 1323160 libgnutls30_3.7.9-2+deb12u6_armhf.deb
 18ab7df568fe404e7faef01fbd46b5b080995561 49364 libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_armhf.deb
 cb38178f3a09f3b04b879990a7e2f0011e983662 12224 libgnutlsxx30_3.7.9-2+deb12u6_armhf.deb
Checksums-Sha256:
 cceac8f0381fa90b0edd9fdf59efb4f59b8298e5c5e61771dc413a1b9599a565 842208 gnutls-bin-dbgsym_3.7.9-2+deb12u6_armhf.deb
 058d06e019fdddda2a427a5091065f66ea90fdcf070c5df60792a664c3c9b361 616228 gnutls-bin_3.7.9-2+deb12u6_armhf.deb
 7d5bf2ce7a82eeef140c873080dd7a8b029917960e381c15410ba4b222226ad1 11299 gnutls28_3.7.9-2+deb12u6_armhf-buildd.buildinfo
 9834e7daf0c370edc47c43ecf9de6b8e9695925dd4134fa343097decaf4983a8 253640 guile-gnutls-dbgsym_3.7.9-2+deb12u6_armhf.deb
 b22f3265764561a3df3d721b3c4b5b9b8f721c1d9a50575c437c2b298b69071d 453956 guile-gnutls_3.7.9-2+deb12u6_armhf.deb
 e784ab7ff21bb28c8ef7d94dfe79282fe8e302bc4907f774bf97d98db31ba4ec 90384 libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_armhf.deb
 111297f08b68d0e93f84ed6a39ec6fb906b9963e91a764203962b2aa47cf3b60 400512 libgnutls-dane0_3.7.9-2+deb12u6_armhf.deb
 496ebab405349687beae22d2413be658fdb14617cc65c69849b4132212b4a789 91660 libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_armhf.deb
 ec1d8df3668ee1cb7db3682c1a0adef78d6421131663f4816523beab0b147185 400324 libgnutls-openssl27_3.7.9-2+deb12u6_armhf.deb
 c81d8a232f0ec7e3ae4d4d604eee95df6715da26c273a5b330fac64f49f45d25 1289864 libgnutls28-dev_3.7.9-2+deb12u6_armhf.deb
 44b8b43dd13a3c3abc3ac4da6142be2fed58ec0ad2f8d7a6b1e48aba7b08b643 2037860 libgnutls30-dbgsym_3.7.9-2+deb12u6_armhf.deb
 b147fdfea243335565199e1f3e37934b73bba3d33604807d00b91f890fa6ae5b 1323160 libgnutls30_3.7.9-2+deb12u6_armhf.deb
 5da8a4079d3487b86f77bbacde6b6cd0ae08aecfbea3280a06168d7ab489c0fe 49364 libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_armhf.deb
 39c4de2a6b949e1526a2e568aafccf116f614f927e1273d0a3e075c0bdb047de 12224 libgnutlsxx30_3.7.9-2+deb12u6_armhf.deb
Files:
 0d0fbce42d2e525d7bf3f4871961fbeb 842208 debug optional gnutls-bin-dbgsym_3.7.9-2+deb12u6_armhf.deb
 c309246fa257d1c602a01c735f2db880 616228 net optional gnutls-bin_3.7.9-2+deb12u6_armhf.deb
 53cc59be1bc447af57821ae9e917068d 11299 libs optional gnutls28_3.7.9-2+deb12u6_armhf-buildd.buildinfo
 a6af9e1c837765ea835cb883d7d52083 253640 debug optional guile-gnutls-dbgsym_3.7.9-2+deb12u6_armhf.deb
 cdde166f755abe395b7384407d257e43 453956 lisp optional guile-gnutls_3.7.9-2+deb12u6_armhf.deb
 44995669865fd9ceb8bc76ba694ae320 90384 debug optional libgnutls-dane0-dbgsym_3.7.9-2+deb12u6_armhf.deb
 d1de370e02b6153e8027dfb79d5d8aa5 400512 libs optional libgnutls-dane0_3.7.9-2+deb12u6_armhf.deb
 4d4106d77e644c7d6a41646dd7b89217 91660 debug optional libgnutls-openssl27-dbgsym_3.7.9-2+deb12u6_armhf.deb
 1c9b0a6855d8648ef19c00deccbdf34e 400324 libs optional libgnutls-openssl27_3.7.9-2+deb12u6_armhf.deb
 e82aa630f45808f9be8e97649c6de22d 1289864 libdevel optional libgnutls28-dev_3.7.9-2+deb12u6_armhf.deb
 2a5ca246ff96251a3d53bc5ac6dfeb95 2037860 debug optional libgnutls30-dbgsym_3.7.9-2+deb12u6_armhf.deb
 c15a23fb4f88f71b9e9f72752a28b790 1323160 libs optional libgnutls30_3.7.9-2+deb12u6_armhf.deb
 faea78c2d9cfb2d5258ff173efb117dc 49364 debug optional libgnutlsxx30-dbgsym_3.7.9-2+deb12u6_armhf.deb
 659adc5d3e183ca1d70553063f4d5ef6 12224 libs optional libgnutlsxx30_3.7.9-2+deb12u6_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=zyFO
-----END PGP SIGNATURE-----